WS-2023-0176 | Mend Vulnerability Database

Vulnerability DatabaseWS-2023-0176

WS-2023-0176

Published:May 20, 2026

Updated:May 20, 2026

Path Traversal vulnerability in PHP LocalVolumeDriver connector

Affected Packages

lionbridge.flexframe.webui (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) =3.2.110 <3.2.112

Fix Suggestion:

Update to version 3.2.112

playground/design (PHP):

Affected version(s) >=1.1.1 <1.2.1

Fix Suggestion:

Update to version 1.2.1

herurahmat/rimbun (PHP):

Affected version(s) >=1.0.2 <=1.0.3

Fix Suggestion:

Update to version no_fix

bigbrush/yii2-big (PHP):

Affected version(s) =1.2.10

Fix Suggestion:

Update to version no_fix

nova-framework/framework (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

laraflat/laraflat (PHP):

Affected version(s) >=dev-dev <=3.0.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.64 <3.0.76

Fix Suggestion:

Update to version 3.0.76

ecnet/admin (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

studio-42/elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

recca0120/elfinder (PHP):

Affected version(s) =v1.1 <v1.1.1

Fix Suggestion:

Update to version v1.1.1

components/elfinder (PHP):

Affected version(s) =2.2 <3.0-alpha

Fix Suggestion:

Update to version 3.0-alpha

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.0.2 <1.1.3

Fix Suggestion:

Update to version 1.1.3

serhatozles/yii2-elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

helios-ag/fm-elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.48 <=v1.1.55

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

ttek/tk-base (PHP):

Affected version(s) =3.2.102 <3.2.104

Fix Suggestion:

Update to version 3.2.104

imagecms/imagecms (PHP):

Affected version(s) >=v4.4 <v4.9

Fix Suggestion:

Update to version v4.9

wufeifei/grw (PHP):

Affected version(s) >=dev-developer <=dev-pr/29

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) =3.2.106 <3.2.108

Fix Suggestion:

Update to version 3.2.108

genix/cms (PHP):

Affected version(s) >=v0.0.7-alpha <v1.1.12.x-dev

Fix Suggestion:

Update to version v1.1.12.x-dev

offerel/storage (PHP):

Affected version(s) >=1.2.2 <=1.4.5

Fix Suggestion:

Update to version no_fix

studio-42/elfinder (PHP):

Affected version(s) >=2.0-beta <2.1.x-dev

Fix Suggestion:

Update to version 2.1.x-dev

skcms/admin-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

simple-mvc-framework/v2 (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

mofei/oneone (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

runcmf/runbb-ext-markitup (PHP):

Affected version(s) >=dev-master <=0.1.0

Fix Suggestion:

Update to version no_fix

uom/tk-base (PHP):

Affected version(s) =1.0.138 <1.0.140

Fix Suggestion:

Update to version 1.0.140

copona/copona (PHP):

Affected version(s) =dev-EV-code-refactoring <dev-checkout_new

Fix Suggestion:

Update to version dev-checkout_new

nova-framework/framework (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

simple-mvc-framework/v2 (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

ttek/tk-base (PHP):

Affected version(s) >=3.0.86 <3.0.98

Fix Suggestion:

Update to version 3.0.98

simple-mvc-framework/v2 (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

ttek/tk-base (PHP):

Affected version(s) >=3.0.100 <3.2.64

Fix Suggestion:

Update to version 3.2.64

basdog22/laracms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

alxishin/elfinder (PHP):

Affected version(s) >=dev-master <=2.1.59.1

Fix Suggestion:

Update to version no_fix

nickbur/sunrisecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.50 <3.0.62

Fix Suggestion:

Update to version 3.0.62

nova-framework/cms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

studio-42/elfinder (PHP):

Affected version(s) >=dev-2.1-src <2.1.41

Fix Suggestion:

Update to version 2.1.41

nova-framework/novacms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

gekomod/files-bundle (PHP):

Affected version(s) =dev-master <0.2

Fix Suggestion:

Update to version 0.2

ttek/tk-base (PHP):

Affected version(s) >=3.0.78 <3.0.84

Fix Suggestion:

Update to version 3.0.84

bigbrush/yii2-big (PHP):

Affected version(s) >=1.1.0 <1.2.9

Fix Suggestion:

Update to version 1.2.9

maddoger/yii2-elfinder (PHP):

Affected version(s) =v1.1

Fix Suggestion:

Update to version no_fix

gyman/supr (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

siteforever/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

whole/core (PHP):

Affected version(s) >=dev-localization <=1.1.3.2

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.30 <3.0.42

Fix Suggestion:

Update to version 3.0.42

ttek/tk-base (PHP):

Affected version(s) >=1.0.52 <1.0.156

Fix Suggestion:

Update to version 1.0.156

gekomod/files-bundle (PHP):

Affected version(s) >=1.1.0 <=1.1.1

Fix Suggestion:

Update to version no_fix

playground/playground (PHP):

Affected version(s) >=1.1.1 <=2.2.0

Fix Suggestion:

Update to version no_fix

copona/copona (PHP):

Affected version(s) =dev-media-manager <dev-newcart

Fix Suggestion:

Update to version dev-newcart

silverkix/cms-bundle (PHP):

Affected version(s) >=dev-master <=dev-1.0.0-beta

Fix Suggestion:

Update to version no_fix

ci4-cms-erp/ci4ms (PHP):

Affected version(s) >=dev-breadcrumbs <dev-master

Fix Suggestion:

Update to version dev-master

alphalemon/elfinder-bundle (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.44 <v1.1.46

Fix Suggestion:

Update to version v1.1.46

dirmax/zettaframework (PHP):

Affected version(s) >=v0.1 <v1.0

Fix Suggestion:

Update to version v1.0

nao-pon/elfinder-nightly (PHP):

Affected version(s) =2.0.x-dev <dev-2.0_n

Fix Suggestion:

Update to version dev-2.0_n

nickbur/divinecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-cms (PHP):

Affected version(s) >=v1.1.3 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

basdog22/laracms_nopublic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

uom/tk-base (PHP):

Affected version(s) >=3.4.18 <=3.4.26

Fix Suggestion:

Update to version no_fix

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/phpmailer/phpmailer-6.5.0 <=dev-dependabot/composer/guzzlehttp/psr7-1.8.5

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.1.4 <1.1.6

Fix Suggestion:

Update to version 1.1.6

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.41 <v1.1.43

Fix Suggestion:

Update to version v1.1.43

hgati/magento-1-page-builder-module (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

romjkeeeen/fix-cms-core1 (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =1.1.0-beta <1.1.x-dev

Fix Suggestion:

Update to version 1.1.x-dev

ttek/tk-base (PHP):

Affected version(s) =3.0.x-dev <3.0.2

Fix Suggestion:

Update to version 3.0.2

ttek/tk-base (PHP):

Affected version(s) >=3.2.128 <3.2.136

Fix Suggestion:

Update to version 3.2.136

bigbrush/yii2-big (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

copona/copona (PHP):

Affected version(s) >=dev-orm-eloquent <dev-pdf

Fix Suggestion:

Update to version dev-pdf

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/studio-42/elfinder-2.1.59 <v0.0.1

Fix Suggestion:

Update to version v0.0.1

studio-42/elfinder (PHP):

Affected version(s) >=2.1.50 <2.1.60

Fix Suggestion:

Update to version 2.1.60

copona/copona (PHP):

Affected version(s) =dev-guest2checkout <dev-dependabot/composer/twig/twig-2.14.11

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-2.14.11

ttek/tk-base (PHP):

Affected version(s) >=3.2.72 <3.2.96

Fix Suggestion:

Update to version 3.2.96

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.3.2 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

ttek/tk-base (PHP):

Affected version(s) >=3.2.142 <8.0.0

Fix Suggestion:

Update to version 8.0.0

tugumuda/helpers (PHP):

Affected version(s) >=dev-master <=5.4.x-dev

Fix Suggestion:

Update to version no_fix

a70838697/yii2elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

offerel/storage (PHP):

Affected version(s) >=dev-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

pkrs/pkrs-framework (PHP):

Affected version(s) >=0.1.5 <0.1.8

Fix Suggestion:

Update to version 0.1.8

uom/tk-base (PHP):

Affected version(s) >=3.4.6 <3.4.16

Fix Suggestion:

Update to version 3.4.16

phpffcms/ffcms-elfinder (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.12 <3.0.24

Fix Suggestion:

Update to version 3.0.24

keltanas/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

nova-framework/framework (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

wtolk/adfm-elfinder (PHP):

Affected version(s) =dev-tinymce-elfinder

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=dev-ver1 <1.0.50

Fix Suggestion:

Update to version 1.0.50

adfab/core (PHP):

Affected version(s) >=dev-master <0.3.2

Fix Suggestion:

Update to version 0.3.2

rob006/yii-elfinder2 (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

research-nk/rnk-elfinder-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ci4-cms-erp/ci4ms (PHP):

Affected version(s) =dev-searchpage <0.21.0

Fix Suggestion:

Update to version 0.21.0

gekomod/files-admin-bundle (PHP):

Affected version(s) =1.0

Fix Suggestion:

Update to version no_fix

herurahmat/rimbunci3 (PHP):

Affected version(s) >=1.0.1 <=1.0.3

Fix Suggestion:

Update to version no_fix

maddoger/yii2-elfinder (PHP):

Affected version(s) =dev-master <v.1.0.0

Fix Suggestion:

Update to version v.1.0.0

semisalov/fix-cms-core (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

adfab/core (PHP):

Affected version(s) >=0.3.5 <=0.3.19

Fix Suggestion:

Update to version no_fix

yukisaw/elfinder (PHP):

Affected version(s) >=dev-filesize <=2.2.2

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.0 <v1.1.3

Fix Suggestion:

Update to version v1.1.3

Related Resources (1)

https://github.com/Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891

Do you need more information?

CVSS v4

Base Score:

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE